In the UK, any public or private organisation accessing patient data held by the public health system must complete a mandatory data security and protection toolkit annually. In the US, federal audits ...